dot-env-it/laravel-api-integrator

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the one-person publishing base, this is a meaningful maintenance concern despite the recent release and May repository push.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a package handling third-party API integrations, the missing automated security checks modestly reduce transparency.

Security policycaution

The repository has no security policy. This leaves vulnerability reporting and maintainer response expectations undocumented.

Workflow auditcaution

All three analyzed action references are unpinned, which makes workflow dependencies less reproducible and less resistant to upstream changes. The workflow audit is complete and found no untrusted checkout, injection, or high-severity issue, while the absent top-level permissions block is acceptable on its own.